6161 matches found
CVE-2021-39520
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service...
Finding 0-days with Jackalope
ARCHIVED STORY Finding 0-days with Jackalope By Douglas McKee · September 16, 2021 Overview On March 21st, 2021, the McAfee Enterprise Advanced Threat Research ATR team released several vulnerabilities it discovered in the Netop Vision Pro Education software, a popular schooling software used by...
brander (>=0.1.6 <=0.1.9), chin-plugin-convert-svg (>=0.0.1 <=0.0.3) +3 more potentially affected by CVE-2021-23631 via convert-svg-to-jpeg (>=0.3.3 <=0.5.0)
convert-svg-to-jpeg NPM version =0.3.3, =0.1.6, =0.0.1, =0.0.3, =0.2.6, =0.2.21 - xd2svg =0.8.0 Source cves: CVE-2021-23631 Source advisory: SNYK:JS-CONVERTSVGTOJPEG-2348245...
libjxl Assertion Failure Vulnerability
libjxl is a reference implementation of the JPEG XL image format. libjxl version 0.5.0 contains an assertion failure vulnerability in lib/jxl/image.cc jxl::PlaneBase::PlaneBase. An attacker can exploit the vulnerability to cause a denial of service via a malicious GIF file...
libjxl Dezero Error Vulnerability
libjxl is a reference implementation of the JPEG XL image format. libjxl version 0.3.7 of lib/extras/codecapng.cc jxl::DecodeImageAPNG is vulnerable to a dezero error. An attacker can exploit this vulnerability via a malicious APNG file to cause a denial of service...
Denial Of Service (DoS)
gthumb:stretch is vulnerable to denial of service. A heap-based buffer overflow in cairoimagesurfacecreatefromjpeg in extensions/cairoio/cairo-image-surface-jpeg.c in GNOME gThumb and Linux Mint Pix allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file...
Debian DLA-2749-1 : gthumb - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2749 advisory. An issue has been found in gthumb, an image viewer and browser. A heap-based buffer overflow in cairoimagesurfacecreatefromjpeg in...
EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2021-2309)
According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000...
Php-Jpeg-Injector - Injects Php Payloads Into Jpeg Images
Injects php payloads into jpeg images. Related to this post. Use Case You have a web application that runs a jpeg image through PHP's GD graphics library. Description This script injects PHP code into a specified jpeg image. The web application will execute the payload if it interprets the image...
PT-2021-7967 · Unknown +2 · Stb Image.H +2
Name of the Vulnerable Software and Affected Versions: stb image.h version 2.27 Description: The issue is related to a heap-based buffer overflow in the stbi jpeg load function of the stb image.h library, which can lead to Information Disclosure or Denial of Service. This can be exploited by a...
EulerOS Virtualization 3.0.2.2 : libjpeg-turbo (EulerOS-SA-2021-2144)
According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The libjpeg-turbo package contains a library of functions for manipulatingJPEG images.Security Fixes:libjpeg-turbo 1.5.2 has a...
gThumb Denial of Service Vulnerability
gThumb is a versatile image viewing tool that can manage, edit, and view images. gThumb versions prior to 3.10.1 are vulnerable to a denial of service. An attacker could exploit this vulnerability to crash the program via malformed JPEG images...
CVE-2020-36427
GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...
DEBIAN-CVE-2020-36427
GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...
CVE-2020-36427
GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...
CVE-2020-36427
GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...
Design/Logic Flaw
GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image...
CVE-2020-36427
CVE-2020-36427 affects GNOME gThumb prior to version 3.10.1. A malformed JPEG image can trigger an application crash (DoS) in gThumb, as described in multiple sources (e.g., OSV references and vendor advisories). The known public statement: vulnerable component is gThumb’s JPEG handling; root cau...
